Refers to methods and controls used to proactively
protect an organization from natural or man – made
threats to physical facilities and buildings, as well as to
the physical locations where IT equipment is located or
work is performed (e.g., computer rooms , work location) .